Upwind Threat Briefing: Shai Hulud 2.0 npm Supply Chain Malware Hits 25K+ Repos
Upwind breaks down the Shai Hulud 2.0 npm malware campaign — one of the largest supply chain attacks to date. Over 25,000 GitHub repositories have been compromised by this self-replicating worm, exploiting preinstall scripts and CI pipelines to steal credentials and spread rapidly. Learn what’s new in this wave, how it operates, and what developers and security teams need to do now.
